$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json) Hash identifier: zh2qKr4rAoFsqq/JRKUs/PiDRN0X6ZbQrhnRYLqPj+Y= Subject key identifier: B1:76:8A:9E:4E:F2:EF:6B:01:0D:52:32:65:15:8D:56:43:BC:D8:1D Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F432858451248E92A759E9AF469D2AE18 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa Signing time: Sat 02 Mar 2024 06:57:32 +0000 ROA not before: Sat 02 Mar 2024 06:57:32 +0000 ROA not after: Fri 31 May 2024 05:57:32 +0000 asID: 7850 IP address blocks: 198.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:12:48:e9:2a:75:9e:9a:f4:69:d2:ae:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Mar 2 06:57:32 2024 GMT Not After : May 31 05:57:32 2024 GMT Subject: CN=51fa373a-32eb-4f46-bc6c-fcb1cf0c878a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:60:ef:bc:6f:c4:0e:c8:e7:50:21:bb:f9:1c: bf:37:92:84:28:a1:42:bc:04:fb:4a:8a:da:cf:7b: ef:c2:c4:f4:6b:bd:ff:a0:55:cf:f6:8e:db:ea:0d: 5b:a3:d8:c9:78:4d:dd:24:0e:de:70:47:8f:57:4d: fa:95:ad:21:58:c3:e3:b4:50:17:14:cd:a7:ca:e5: e6:23:d1:07:49:0b:b3:07:4b:de:93:5b:d2:c6:07: f6:10:78:76:ec:22:c2:e7:12:81:88:05:8b:63:ce: 4d:59:5e:09:2b:18:3a:93:10:1b:14:db:c7:71:c1: db:0e:ca:6b:24:2c:68:bf:fd:6b:ba:46:dc:52:16: 85:eb:56:4a:58:97:d7:11:43:8d:20:cf:e1:c0:b8: fd:40:66:92:3d:cf:7f:02:75:4a:64:91:3f:72:f7: 03:9f:de:23:bb:ea:1a:4c:db:81:8b:89:f8:56:3c: 3d:29:8e:3a:9d:5e:de:94:e0:6e:6e:44:95:ae:7f: d5:a8:d7:70:23:4f:13:af:3e:08:ab:d9:1f:50:b9: 89:75:69:e3:34:02:1c:bd:22:d9:f7:31:6a:82:65: ff:6e:95:83:23:5f:0b:3f:9d:e4:fa:7f:a8:de:d7: cf:45:31:1f:5a:9b:ef:f0:51:72:ef:2d:44:e5:ab: 2d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:76:8A:9E:4E:F2:EF:6B:01:0D:52:32:65:15:8D:56:43:BC:D8:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 198.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:11:4d:2d:c5:0d:35:fa:0e:2e:31:4e:22:aa:a6:75:59:ba: 27:f2:0a:62:d3:9d:b5:0d:1a:6a:06:9b:20:52:4c:e1:b0:d8: 0d:84:10:c4:40:79:43:30:5a:96:18:21:25:93:f3:ec:18:99: a0:56:6c:c2:74:37:79:ce:26:a2:cc:23:f9:02:9b:c8:1d:53: b0:5a:e9:ba:ec:5c:8f:ee:e8:e5:80:aa:3c:0a:bb:56:2d:9d: 47:4b:d9:21:32:46:1e:b9:2e:60:fa:31:7b:b1:b7:5e:ae:66: 86:d5:b6:e2:72:22:ee:e0:a9:ec:59:b7:f2:07:28:77:fe:49: 92:50:c0:75:88:37:6b:63:6a:d6:1d:ab:fc:06:5c:72:ff:99: 0a:7f:07:b5:62:9b:d4:c7:fd:c3:0a:69:0c:b9:6a:5f:7e:84: fd:40:1d:a4:50:61:a4:f8:fe:ce:85:7c:06:59:d7:a7:1c:05: 27:ed:a7:78:3d:a9:df:67:43:58:b4:b1:70:12:ff:44:2c:59: 55:b9:3d:f5:81:a6:34:7d:6e:a1:27:d6:03:7f:2c:c0:17:07: f4:98:e8:09:95:a9:d1:58:b8:7a:43:6e:94:3a:49:f6:4a:59: 01:9b:56:12:23:3f:b4:1c:31:e6:81:c2:02:92:42:55:a0:5c: 7f:e9:22:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUSSOkqdZ6a9GnSrhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI0MDMwMjA2NTczMloXDTI0MDUzMTA1NTczMlowLzEtMCsGA1UEAxMk NTFmYTM3M2EtMzJlYi00ZjQ2LWJjNmMtZmNiMWNmMGM4NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmDvvG/EDsjnUCG7+Ry/N5KEKKFCvAT7Sora z3vvwsT0a73/oFXP9o7b6g1bo9jJeE3dJA7ecEePV036la0hWMPjtFAXFM2nyuXm I9EHSQuzB0vek1vSxgf2EHh27CLC5xKBiAWLY85NWV4JKxg6kxAbFNvHccHbDspr JCxov/1rukbcUhaF61ZKWJfXEUONIM/hwLj9QGaSPc9/AnVKZJE/cvcDn94ju+oa TNuBi4n4Vjw9KY46nV7elOBubkSVrn/VqNdwI08Trz4Iq9kfULmJdWnjNAIcvSLZ 9zFqgmX/bpWDI18LP53k+n+o3tfPRTEfWpvv8FFy7y1E5astbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF2ip5O8u9rAQ1SMmUVjVZDvNgdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvNDA0OWIyY2MtMzUxNy0z NzZjLWJiNWItNWI1MjQ5OTU3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8RTS3FDTX6Di4xTiKqpnVZuifyCmLTnbUNGmoGmyBSTOGw2A2EEMRA eUMwWpYYISWT8+wYmaBWbMJ0N3nOJqLMI/kCm8gdU7Ba6brsXI/u6OWAqjwKu1Yt nUdL2SEyRh65LmD6MXuxt16uZobVtuJyIu7gqexZt/IHKHf+SZJQwHWIN2tjatYd q/wGXHL/mQp/B7Vim9TH/cMKaQy5al9+hP1AHaRQYaT4/s6FfAZZ16ccBSftp3g9 qd9nQ1i0sXAS/0QsWVW5PfWBpjR9bqEn1gN/LMAXB/SY6AmVqdFYuHpDbpQ6SfZK WQGbVhIjP7QcMeaBwgKSQlWgXH/pIoY= -----END CERTIFICATE-----Generated at Wed May 15 18:21:56 2024 by rpki-client on console-ams.rpki-client.org